Customer portal my account privacy notice

This privacy notice is designed to help you understand how and why we process your personal data in relation to ‘my account’. This notice should be read in conjunction with our corporate privacy notice.

Who are we?

North Yorkshire Council are a ‘data controller’ as defined by Article 4(7) of the UK General Data Protection Regulation (UK GDPR). ‘my account’ allows a customer to apply for services via our customer portal. 

We have appointed Veritau to be our Data Protection Officer. Their contact details are:

Information Governance Office
Veritau
West Offices
Station Rise
York
North Yorkshire
YO1 6GA

Email: infogov@northyorks.gov.uk

Tel: 01904 552848

What personal information do we collect?

When you create a ‘my account’ you will be asked to provide certain categories of personal information. North Yorkshire Council will collect the following:

  • name
  • date of birth
  • address
  • contact details (telephone number and email address)

Why do we collect your personal information?

We collect this information to create “my account”, validate “my account” and enable you to apply for services within “my account’’.

This information will also be used to keep “my account” information current. From time to time we will contact you to ensure that the information it holds in “my account” is accurate and up to date.

Who do we share this information with?

This information will be used when you apply for services in the customer portal accessed online from our website.

How long do we keep your information for?

Data held

Retention period

Current customer information

As long as a customer chooses to have a live customer account. If there are no outstanding/active services in “my account” and there has been no activity for 1 year you will be contacted by e-mail and asked if you would like your data and “my account” deleted.

What is our lawful basis for processing your information?

We rely on the following lawful basis to process your personal data:

  • UK GDPR Article 6 (1)(a) – the data subject has given consent to the processing of his or her personal data for one or more specific purposes

For more information about how we use your data, including your privacy rights and the complaints process, please see our corporate privacy notice.